Skip to content

Capgo CLI: symlink-following local secret writes enable arbitrary file overwrite + world-readable credentials (0600 missing)

High severity GitHub Reviewed Published Mar 17, 2026 in Cap-go/capgo • Updated Mar 18, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts